CVE-2021-3156

CVE-2021-3156 CVE-2021-3156: Sudo heap overflow exploit for Debian 10 Vulnerability analysis and exploit development: https://syst3mfailure.io/sudo-heap-overflow Exploit designed for: Sudo: Version 1.8.27 1.8.27-1+deb10u1 Checksum sha256:...

dirty-pipe-poc

POC Exploit to add user to Sudo for CVE-2022-0847 Dirty Pipe Vulnerability This repo is based of the Vulnerability, Writeup and Exploit produced by Max Kellermann all found here. Just like everyone I had to take advantage of playing with the worlds most trivial to repro Priv Esc the blog post doe...

CVE-2025-32463-sudo-chwoot

CVE-2025-32463-sudo-chwoot CVE-2025-32463 の PoC - Sudo chroot 権限昇格の脆弱性 元の PoC sudo-chwoot.sh CTF デモ chwoot-demo.c ドキュメント 解説記事: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot 勧告: https://www.sudo.ws/security/advisories/chrootbug/ その他の PoC ⚠️ 警告 : これらの PoC...

CVE-2026-87114

A flaw in kube-compare allows a remote attacker to achieve arbitrary code execution on an operator's workstation. When processing a container:// reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of extracting data from a stopped container. This vulner...

CVE-2026-87114 Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo

A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...

CVE-2025-32463_chwoot

CVE-2025-32463 – sudo chroot "chwoot" PoC This repository provides a minimal, reproducible environment to demonstrate the CVE‑2025‑32463 privilege‑escalation flaw in sudo’s chroot feature. This vulnerability is reported by Rich Mirch @0xm1rch on X @ Stratascale. Original post: Vulnerability...

CVE-2021-3156

CVE-2021-3156 Sudo Baron Samedit This repository is CVE-2021-3156 exploit targeting Linux x64. For writeup, please visit https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31 Credit to Braon Samedit of Qualys for the original advisory. Files...

baron-samedit

Baron Samedit PoC Description This is a Proof-of-Concept PoC exploit for the Baron Samedit vulnerability CVE-2021-3156 tested on Ubuntu 20.04 with sudo version 1.8.31 and glibc version 2.31. The exploit leverages a heap-based buffer overflow in sudo's handling of command-line arguments when using...

Sudo-CVE-2021-3156

This repository does not have a README...

CVE-2021-3156-PoC

CVE-2021-3156 PoC Introduction This is an exploit for the CVE-2021-3156 sudo vulnerability dubbed Baron Samedit by Qualys. Usage build: $ make list targets: $ ./sudo-hax-me-a-sandwich run: $ ./sudo-hax-me-a-sandwich Contributing Send sensible PR's, I might merge. Some ideas: More targets Target...

CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-

Qualys Security Advisory Baron Samedit: Heap-based buffer overflow in Sudo CVE-2021-3156 ======================================================================== Contents Summary Analysis Exploitation Acknowledgments Timeline =======================================================================...

privesc-CVE-2010-0426

Sudo 1.6.x=1.6.9p21 および 1.7.x=1.7.2p4 のローカル権限昇格 Sudo su "do" は、システム管理者が特定のユーザー（またはユーザーグループ）に対して、すべてのコマンドと引数を記録しながら、一部（またはすべて）のコマンドを root として実行する権限を付与できるようにするツールです。 脆弱な環境 テスト用の脆弱な環境を構築するには、Docker のインストールが必要です。次のコマンドを実行するだけです： docker build -t privesc/cve-2010-0426 . docker run --rm -it...

CVE-2021-3156

CVE-2021-3156 Ansible role patches CVE-2021-3156 for CentOS Intro Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character CVE-2021-3156 News RU RUN ansible-playbook...

SimpleCTF-THM-Walkthrough

SimpleCTF-THM-Relatory First CTF successfully completed! This repo documents my walkthrough of TryHackMe's Simple CTF. It covers network reconnaissance Nmap, web exploitation CVE-2019-9053, and credential cracking. As a dev, it was great to pivot from SQLi to a Root shell by leveraging Sudo...

CVE-2019-18634

CVE-2019-18634 ⚠️ This code has only been tested on sudo 1.8.25. The bug impacts 1.8.30, but there are differences in character handling that prevent this PoC from executing this does not mitigate the exploitability of the bug. See 1 ⚠️ Functional exploit for CVE-2019-18634, a heap buffer overflow...

Linux-Privilege-Escalation-using-Sudo-Rights

Linux-Privilege-Escalation-using-Sudo-Rights CVE-2019-14287...

CVE-2022-0486

Fidelis Network and Deception - CVE-2022-0486 - Insecure File Permissions Privilege Escalation - Multiple Releasability and Acknowledgements All exploits were approved for public release by the United States Government. Special thanks to the servicemen and government liaisons tasked with approvin...

CVE-2025-32462-CVE-2025-32463-PoC-Lab

CVE-2025-32462 & CVE-2025-32463 – Advanced PoC Lab This repository provides a container-based lab and detailed PoC for two critical sudo vulnerabilities: CVE-2025-32462 – sudo -h host matching logic bypass CVE-2025-32463 – sudo -R chroot NSS library escape Research & Credit Original research by...

CVE-2021-3156

CVE-2021-3156 - Heap-Based Buffer Overflow in Sudo ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author Qualys Research Team Description Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based...

dockerevil

dockerevil Docker テクノロジーにおける私のセキュリティ上の欠陥を保存するためのシンプルなリポジトリ 2016 - 2017 Docker API の権限昇格LPE/RPE オフラインサーバー/最小イメージ/TAR Dockerfile からのビルドによる権限昇格 Docker SUDO 権限昇格 PoC Nmap スクリプト 2019 CodeStudent1995 ベースのエクスプロイト OpenShift の権限昇格oc Docker で見つかったその他の素晴らしいセキュリティ上の欠陥: Docker API...